Your company has a finance department, a Fabric tenant, an Azure Storage account named 'storage1', and a Microsoft Entra group named 'Group1' that contains the finance department users.

You create a new workspace named 'Workspace1'. You need to complete the configuration to meet the following requirements:

• Finance department users can create and edit items in Workspace1.
• Workspace1 can securely access storage1 to read and write data.
• You are the only admin of Workspace1.
• Administrative effort must be minimized.

Which two actions should you perform next? Each correct answer presents part of the solution.